You can clone with
HTTPS or Subversion.
Workaround: list runtime dependency in the Gemfile.
Add dependencies. Note that mustache (the runtime dep) is not listed …
…in the DEPENDENCIES section of Gemfile.lock.
Do not ignore Gemfile.lock since I'm demonstrating a bug related to it.